Detections
Analytics

1.4.9 Ensure 'Default automatic downloads setting' is set to 'Enabled: Prevent all websites from performing multiple downloads, even after a user gesture'

Information

This policy setting controls whether websites can perform multiple downloads successively without user interaction.

The recommended state for this setting is: Enabled: Prevent all websites from performing multiple downloads, even after a user gesture.

Unintentional malicious content could be downloaded without user interaction if websites are allowed to perform automatic downloads.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled: Prevent all websites from performing multiple downloads, even after a user gesture :

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Content settings\Default automatic downloads setting

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from: Download Microsoft Edge for Business - Microsoft https://www.microsoft.com/en-us/edge/business/download.

Impact:

Websites will not be able to perform automatic downloads.

See Also

https://workbench.cisecurity.org/benchmarks/28120

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-2c.

Plugin: Windows

Control ID: 6d0f8e8fcdcbe76c0abca2d6ada779b441522f76843d3b86ea32e84d4bc89200